CVE-2021-25090 GridKit Portfolio < 2.1.0 - Subscriber+ Stored Cross-Site Scripting
Authenticated subscribers can inject malicious scripts via AJAX actions due to missing authorization and sanitization, leading to stored XSS attacks.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- A user has to click or open something
- Fix
- None listed
What is CVE-2021-25090?
CVE-2021-25090 is a medium-severity cross-site scripting vulnerability in Unknown Portfolio Gallery, Product Catalog – Grid KIT Portfolio, published on 11 Apr 2022. Any signed-in user can exploit it over the network, and only if a user opens a file or follows a link.
Official description
The Portfolio Gallery, Product Catalog WordPress plugin before 2.1.0 does not have authorisation and CSRF checks in various functions related to AJAX actions, allowing any authenticated users, such as subscriber, to call them. Due to the lack of sanitisation and escaping, it could also allows attackers to perform Cross-Site Scripting attacks on pages where a Portfolio is embed
Weakness: CWE-79
Which versions are affected by CVE-2021-25090?
It affects 1 product.
Products include Wpsofts Portfolio Gallery\, Product Catalog - Grid Kit Portfolio.
How do I fix CVE-2021-25090?
No fix has been published for CVE-2021-25090 yet. Limit exposure of the affected software until one is available.
Escape output for the context it lands in and set a strict Content Security Policy. Upgrading the affected component is the real fix. More about Cross-site scripting.
Is CVE-2021-25090 being exploited?
There is no known exploitation of CVE-2021-25090 in the wild and no public exploit code.
Other vulnerabilities in Unknown Portfolio Gallery, Product Catalog – Grid KIT Portfolio
Sources
Also known as GHSA-3prr-q5hc-2742.